Changeset 4878 for branches/2.3/includes/core/filters.php

Timestamp:

05/03/2013 05:32:36 AM (13 years ago)

Author:

johnjamesjacoby

Message:

Switch to using esc_textarea() for filtering form post content values. When using TinyMCE, remove that textarea escaping, and trust tinymce to do its thing. See #2317. (2.3 branch)

File:

• branches/2.3/includes/core/filters.php (modified) (1 diff)

branches/2.3/includes/core/filters.php

@@ -158 +158 @@
 
 // Form textarea output - undo the code-trick done pre-save, and sanitize
+add_filter( 'bbp_get_form_forum_content', 'bbp_code_trick_reverse' );
+add_filter( 'bbp_get_form_forum_content', 'esc_textarea'           );
+add_filter( 'bbp_get_form_forum_content', 'trim'                   );
+add_filter( 'bbp_get_form_topic_content', 'bbp_code_trick_reverse' );
+add_filter( 'bbp_get_form_topic_content', 'esc_textarea'           );
+add_filter( 'bbp_get_form_topic_content', 'trim'                   );
 add_filter( 'bbp_get_form_reply_content', 'bbp_code_trick_reverse' );
-add_filter( 'bbp_get_form_reply_content', 'esc_html'               );
+add_filter( 'bbp_get_form_reply_content', 'esc_textarea'           );
 add_filter( 'bbp_get_form_reply_content', 'trim'                   );
-add_filter( 'bbp_get_form_topic_content', 'bbp_code_trick_reverse' );
-add_filter( 'bbp_get_form_topic_content', 'esc_html'               );
-add_filter( 'bbp_get_form_topic_content', 'trim'                   );
 
 // Add number format filter to functions requiring numeric output